Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File:                     mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier:          J0uAPueveSekydbpVO/9MND6juIAn36Y14FScVYpK4s=
Subject key identifier:   61:64:8D:B9:94:DC:56:55:B0:84:FE:69:A8:91:4A:68:A3:8D:C6:35
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer:       /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial:       0195113541EAFCCBC222332D005579152B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number:          0733
Signing time:             Mon 17 Feb 2025 00:00:57 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:57 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:57 +0000
Files and hashes:         1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: WTQCvGGbTq5oJGdPmlcA9Hon6ckyaOEAUmXuyFi21+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:41:ea:fc:cb:c2:22:33:2d:00:55:79:15:2b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
        Validity
            Not Before: Feb 17 00:00:57 2025 GMT
            Not After : Feb 18 00:00:57 2025 GMT
        Subject: CN=61648db994dc5655b084fe69a8914a68a38dc635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:e8:82:25:3e:38:17:f6:b0:54:f7:a2:7b:
                    ac:74:3d:b6:ab:99:bd:9b:f3:37:82:ea:4b:38:23:
                    20:a8:fe:81:2c:47:d1:54:1d:e0:3a:56:e5:24:17:
                    5b:4a:a5:b6:4c:6e:eb:27:26:9a:81:7e:25:a1:ba:
                    11:40:fa:52:4c:db:ea:46:bf:ce:eb:fd:6a:83:39:
                    5c:89:00:b2:7c:c8:16:ff:c8:1a:34:59:b5:2b:73:
                    9d:50:a3:39:e7:69:19:7e:e1:0d:4a:80:1b:65:38:
                    89:cd:2e:20:8e:9b:66:fb:d4:41:bc:cd:15:85:bd:
                    f7:56:12:42:32:5f:dd:26:f2:fa:bb:a3:fe:5b:43:
                    af:8b:bc:35:fe:28:07:db:d7:b6:6c:f3:3d:64:4d:
                    0c:46:81:59:14:e4:74:e3:00:70:ed:c6:07:ca:2d:
                    1f:f5:12:cd:ce:2d:95:01:cd:10:91:cb:ac:ca:c9:
                    0b:db:43:b2:c9:d5:ca:b3:db:2b:fa:8a:0b:68:c8:
                    f8:da:ff:fc:26:89:9e:5d:88:b2:38:a4:98:fb:79:
                    b3:31:60:12:dd:c4:4f:b5:a3:85:df:c5:6d:5c:f2:
                    c5:b7:69:46:53:be:2f:63:d4:b1:39:36:30:be:e7:
                    a6:f4:4a:cc:18:bf:fb:a5:42:ef:8c:47:fc:23:71:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:8D:B9:94:DC:56:55:B0:84:FE:69:A8:91:4A:68:A3:8D:C6:35
            X509v3 Authority Key Identifier:
                keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:42:ca:f8:95:8d:0c:45:a7:10:d4:13:aa:a7:9a:d6:b1:
         20:91:de:00:3d:b4:b8:b9:ab:49:91:b6:4a:42:92:6e:17:ab:
         97:6a:83:b2:6f:ff:c8:02:15:91:68:e1:c2:2f:e3:fb:d7:ef:
         00:40:b7:89:5e:38:1d:99:82:9b:8d:35:5e:be:3f:2d:0b:71:
         12:f8:1c:92:2a:aa:da:1f:b5:05:b4:c3:a2:d3:46:a6:ae:6b:
         33:e6:ed:42:a1:b7:44:94:66:1c:64:0b:d2:e8:f5:ad:8f:7f:
         55:fd:e3:39:e3:f8:bf:87:ce:e6:53:79:c8:ee:c0:e4:62:3d:
         22:ea:3f:68:6c:bd:65:14:53:06:d0:c8:7e:fe:26:85:86:eb:
         ab:d2:b2:e1:e8:b6:a4:98:83:bf:70:88:22:80:ae:58:16:fa:
         8e:cc:97:a6:7f:d0:22:89:40:5a:30:a8:aa:81:08:52:94:14:
         f5:e7:af:e9:30:64:ca:13:60:b3:e0:67:24:ea:86:ef:46:2a:
         ac:f2:5a:0e:9b:1c:b4:87:f2:ac:38:3e:43:9a:41:b7:d4:f2:
         a1:fd:24:98:d6:53:2e:49:60:cd:fd:8d:30:46:b3:33:8a:49:
         3a:6a:ad:a7:9d:e5:cf:c4:8c:0d:57:d3:29:d2:31:b2:0d:f9:
         b7:47:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:37 2025 by rpki-client